general protection fault, probably for non-canonical address 0xdffffc0020000001: 0000 [#1] PREEMPT SMP KASAN KASAN: probably user-memory-access in range [0x0000000100000008-0x000000010000000f] CPU: 0 PID: 2827 Comm: kworker/0:38 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events console_callback RIP: 0010:fbcon_cursor+0x114/0x660 drivers/video/fbdev/core/fbcon.c:1386 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 e6 04 00 00 4d 8b b4 24 a0 03 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 ba RSP: 0018:ffffc90008ccfaf0 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: ffff8880a4b7d400 RCX: ffffffff83f53950 RDX: 0000000020000001 RSI: ffffffff83c7ee7c RDI: ffff8880a2d843a0 RBP: ffffc90008ccfb30 R08: ffff88809f2a2500 R09: ffffed10148a5e74 R10: ffffed10148a5e73 R11: ffff8880a452f39f R12: ffff8880a2d84000 R13: ffff8880a45bf000 R14: 000000010000000c R15: ffff8880a45bf468 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000006cc090 CR3: 000000009f7dc000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: set_cursor drivers/tty/vt/vt.c:909 [inline] set_cursor+0x1fb/0x250 drivers/tty/vt/vt.c:900 redraw_screen+0x4e1/0x7d0 drivers/tty/vt/vt.c:1025 complete_change_console+0x105/0x3a0 drivers/tty/vt/vt_ioctl.c:1284 change_console+0x19b/0x2c0 drivers/tty/vt/vt_ioctl.c:1409 console_callback+0x3a1/0x400 drivers/tty/vt/vt.c:2836 process_one_work+0xa05/0x17a0 kernel/workqueue.c:2266 worker_thread+0x98/0xe40 kernel/workqueue.c:2412 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace 2fe3a34f46790df4 ]--- RIP: 0010:fbcon_cursor+0x114/0x660 drivers/video/fbdev/core/fbcon.c:1386 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 e6 04 00 00 4d 8b b4 24 a0 03 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 ba RSP: 0018:ffffc90008ccfaf0 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: ffff8880a4b7d400 RCX: ffffffff83f53950 RDX: 0000000020000001 RSI: ffffffff83c7ee7c RDI: ffff8880a2d843a0 RBP: ffffc90008ccfb30 R08: ffff88809f2a2500 R09: ffffed10148a5e74 R10: ffffed10148a5e73 R11: ffff8880a452f39f R12: ffff8880a2d84000 R13: ffff8880a45bf000 R14: 000000010000000c R15: ffff8880a45bf468 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000006cc090 CR3: 000000009f7dc000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400